Part III – Cookies and similar technologies
Koll's Cookie Policy
Data controller
Koll Group Oy
Joensuunkatu 7
24100 Salo
Finland
- Business ID
- 3410913-5
- Data protection matters
- hannu.nissinen@koll.to
- Version
- 2.0
- Effective from
- 28 July 2026
- Applicable data protection law
- The EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act
- Supervisory authority
- Office of the Data Protection Ombudsman (tietosuoja.fi)
This website currently does not use any analytics or marketing cookies. Only strictly necessary device storage is used, needed to remember your cookie choice and for the chat window to function.
This cookie policy explains which cookies and similar technologies are used on Koll's websites and browser-based business portals, and how you can manage your choices.
1. Scope
This cookie policy applies to websites and browser-based business portals operated by Koll, to the extent that cookies, local storage, tracking pixels, SDK identifiers, or similar technologies are used in the relevant service.
Operating-system-level identifiers, permissions and analytics in the mobile app are described in the privacy policy and the app's permission settings. Cookie settings do not control operating-system-level functions of the mobile app.
3. Categories used
| Category | Purpose | Condition for use | Typical duration |
|---|---|---|---|
| Strictly necessary | Website functionality, security, session, login and storing consent choices | No separate consent required where the technology is genuinely necessary for the service requested by the user | For the session or up to 12 months |
| Preferences | Language, view and other choices requested by the user | Consent, unless the choice is necessary for an expressly requested feature | Session or a stated period |
| Analytics | Visitor numbers, usage patterns, performance and service development | Prior consent. Not currently used on this website. | Will be disclosed in the cookie list when deployed |
| Marketing and embeds | Campaign measurement, targeting, external media or booking embeds | Prior consent. Not currently used on this website. | Will be disclosed in the cookie list when deployed |
4. Device storage used on this website
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| koll-cookie-consent | Koll (localStorage) | Stores your cookie choice so the banner does not need to ask again | Strictly necessary | 12 months |
| Chat session state | Koll (browser memory) | Keeps the chat window's state and message history during your visit | Strictly necessary | For the session |
The website does not use Google Analytics, tag management, advertising identifiers, or social media tracking pixels. The list is updated before any new non-essential identifier or service is deployed, and consent will be requested before that identifier is set.
5. Third-party services
The website may contain links to, for example, booking tools, app stores, and social media services. These services open only when the user clicks through to another service, at which point that service's own cookie and privacy policies apply once it has opened.
The website's fonts are loaded from Google Fonts. During loading, the browser connects to Google's server and transmits the IP address. Loading fonts does not set cookies and is not used for tracking.
Messages sent in the chat window are processed on Koll's own server infrastructure and an AI service to generate the conversation. Do not send sensitive personal data in the chat.
6. Giving, refusing and withdrawing consent
Users can accept or reject all non-essential cookies. Rejecting is as easy as accepting: both choices are presented equally prominently in the banner. Non-essential technologies are kept disabled until consent has been given.
Consent can be changed or withdrawn at any time via the "Manage cookies" button at the bottom of the website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, but use of non-essential identifiers will stop once the choice takes effect.
7. Browser settings and third-party blocking
Cookies can also be deleted or blocked in browser settings. However, general browser settings alone are not used as a substitute for Koll's consent mechanism. Blocking strictly necessary cookies may prevent login or another requested function.
8. Processing of personal data and transfers
If information collected via cookies or similar technologies constitutes personal data, its processing is subject to Koll's privacy policy. Transfers outside the EEA use the transfer mechanisms and safeguards described in the privacy policy.
9. Contact
Questions about cookies and the processing of personal data can be sent to Koll Group Oy at hannu.nissinen@koll.to. The up-to-date policy and cookie management options are available on this website.